Ubuntu
ntp package

ntp 1:4.2.4p4+dfsg-6ubuntu2.3 source package in Ubuntu

Changelog

ntp (1:4.2.4p4+dfsg-6ubuntu2.3) intrepid-security; urgency=low

  * SECURITY UPDATE: stack overflow in ntpd when autokey is enabled
    - debian/patches/CVE-2009-1252.patch: update ntpd/ntp_crypto.c to use
      snprintf() with NTP_MAXSTRLEN when writing to statstr. Also defensively
      adjust ntp_peer.c and ntp_timer.c to do the same.
    - CVE-2009-1252
  * SECURITY UPDATE: stack overflow in ntpq when contacting malicious ntp
    server
    - debian/patches/CVE-2009-0159.patch: increase size of buffer in
      cookedprint() in ntpq/ntpq.c and adjust to use snprintf()
    - CVE-2009-0159

 -- Jamie Strandboge <email address hidden>   Wed, 13 May 2009 12:40:32 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Intrepid
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ntp_4.2.4p4+dfsg.orig.tar.gz 2.7 MiB 0eb217554dd7f058649f76ca95c669acee3b235daae3a43b08f70b36d636d2bd
ntp_4.2.4p4+dfsg-6ubuntu2.3.diff.gz 298.5 KiB cdbfcde15f49de4a03621fa9d50b8e563dc7ecf3fe92c3b9a995425137d34cd6
ntp_4.2.4p4+dfsg-6ubuntu2.3.dsc 1.5 KiB cc0c249440a53afe0a698b34fda842257d09d5976f6f701c297de732a7edd8e6

View changes file

Binary packages built by this source

ntp: No summary available for ntp in ubuntu intrepid.

No description available for ntp in ubuntu intrepid.

ntp-doc: No summary available for ntp-doc in ubuntu intrepid.

No description available for ntp-doc in ubuntu intrepid.

ntpdate: No summary available for ntpdate in ubuntu intrepid.

No description available for ntpdate in ubuntu intrepid.